CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 141:

  You have pushed a policy to your firewall and you are not able to access the firewall. What command will allow you to remove the current policy from the machine?

  A. fw purge policy
  B. fw fetch policy
  C. fw purge active
  D. fw unload local
  D. fw unload local

• Question 142:

  Which of the following statements accurately describes the command snapshot?

  A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.
  B. snapshot creates a Security Management Server full system-level backup on any OS.
  C. snapshot stores only the system-configuration settings on the Gateway.
  D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.
  A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.

• Question 143:

  User definitions are stored in ________________ .

  A. $FWDIR/conf/fwmuser
  B. $FWDIR/conf/users.NDB
  C. $FWDIR/conf/fwauth.NDB
  D. $FWDIR/conf/fwusers.conf
  C. $FWDIR/conf/fwauth.NDB

• Question 144:

  Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator
  B. Using SmartDashboard or cpconfig
  C. Using the Web console on GAiA under Product configuration, select Administrators
  D. Using cpconfig on the Security Management Server, choose Administrators
  A. Using SmartDashboard, under Users, select Add New Administrator

• Question 145:

  The command useful for debugging by capturing packet information, including verifying LDAP authentication on all Check Point platforms is:

  A. fw monitor
  A. fw monitor

• Question 146:

  Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?

  A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.
  C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.
  D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

• Question 147:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
  B. If the user credentials do not match an Access Role, the system displays a sandbox.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

• Question 148:

  Jon is explaining how the inspection module works to a colleague. If a new connection passes through the inspection module and the packet matches the rule, what is the next step in the process?

  A. Verify if the packet should be moved through the TCP/IP stack.
  B. Verify if any logging or alerts are defined.
  C. Verify if the packet should be rejected.
  D. Verify if another rule exists.
  B. Verify if any logging or alerts are defined.

• Question 149:

  Fill in the blank. You can set Acceleration to ON or OFF using command syntax ___________ .

  A. fwaccel off/on
  A. fwaccel off/on

• Question 150:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

  A. Type fwm unlock_admin from the Security Management Server command line.
  B. Type fwm unlock_admin -u from the Security Gateway command line.
  C. Type fwm lock_admin -u from the Security Management Server command line.
  D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.
  C. Type fwm lock_admin -u from the Security Management Server command line.